Quickstarts / Getting Started
Red Hat OpenShift Service on AWS (ROSA)
Default architecture (Hosted Control Planes)
- Deploying a ROSA with HCP cluster with Terraform
- Configuring ROSA with HCP Private Cluster API Access
- Securely exposing an application on a private ROSA cluster with a Network Load Balancer
- Add an Ingress Controller to ROSA with a custom domain
- Configuring Microsoft Entra ID as an external authentication provider
- Optimizing Costs with ROSA: Scheduled Cluster Scaling
- Adding a Private Ingress Controller and a Public ALB to a ROSA Cluster
- Configuring OpenShift Logging 6 on ROSA HCP
- Integrating Service Mesh into a ROSA Cluster
- Deploy ROSA HCP Clusters via Red Hat Advanced Cluster Manager
- Using a Private IngressController with CloudFront on a ROSA Cluster
- Deploy ROSA + Nvidia GPUs + RHOAI with Automation
- Accessing ROSA HCP API Server from a Different AWS Account
- Ingress to ROSA Virt VMs with Certificate-Based Site-to-Site (S2S) IPsec VPN and Libreswan
- Automating ECR Pull Secrets on ROSA Using the External Secrets Operator and STS
- AWS Secrets Manager Secrets on ROSA HCP with External Secrets Operator and STS
- Configure Node Pool Scale-to-Zero on ROSA HCP
- Install Portworx on Red Hat OpenShift Service on AWS with hosted control planes
Classic architecture
- Prerequisites Checklist to Deploy ROSA Cluster with STS
- Deploying ROSA in STS mode
- STS OIDC flow in ROSA Operators
- Configuring a ROSA cluster to use ECR secret operator
- Deploying a ROSA cluster with Terraform
- Deploying ROSA in PrivateLink mode
- Deploying ROSA PrivateLink Cluster with Ansible
- Deploying ROSA in STS mode with PrivateLink
- Deploying ROSA in STS mode with custom KMS Key
- ROSA IP addressing best practices
- Installing the AWS Load Balancer Operator on ROSA
- Assign Egress IP for External Traffic
- Configure Network Policies and Egress Firewalls
- Adding AWS WAF in front of ROSA / OSD
- Use AWS Secrets CSI with ROSA in STS mode
- Use AWS CloudWatch Agent to push prometheus metrics to AWS CloudWatch
- Configuring Alerts for User Workloads in ROSA
- AWS EFS on ROSA
- Cross Account EFS Mounting on ROSA
- Configuring a ROSA cluster to pull images from AWS Elastic Container Registry (ECR)
- Access AWS Cross Account resources using OIDC
- Deploy and use the AWS Kubernetes Controller S3 controller
- Verify Required Permissions for a ROSA STS deployment
- Dynamic Certificates for ROSA Custom Domain
- Custom Domain for Component Routes
- Security Reference Architecture for ROSA
- Configure ROSA for Nvidia GPU Workloads
- Connect to RDS from ROSA with STS
- Create an AWS Client VPN connection for a private ROSA Cluster
- ROSA Break Glass Troubleshooting
- Add an Ingress Controller to ROSA with a custom domain
- Install Maximo Application Suite on Red Hat OpenShift Service on AWS with automation
- Using local-zones in ROSA
ROSA in AWS GovCloud
Azure Red Hat OpenShift (ARO)
- Prerequisites Checklist to Deploy ARO Cluster
- Deploying private ARO Cluster with Jump Host access
- Add or Update a Red Hat Pull Secret on ARO
- Considerations for Disaster Recovery with ARO
- Getting Started with the Azure Key Vault CSI Driver
- Create an additional Ingress Controller for ARO
- Configure ARO with Azure NetApp Trident Operator
- Install ARO with Custom Domain using LetsEncrypt with cert manager
- Configure ARO for Nvidia GPU Workloads
- Configure ARO with Azure Front Door
- Create a point to site VPN connection for an ARO Cluster
- Configure access to ARO Image Registry
- Configure ARO with OpenShift Data Foundation
- Setting Up Quay on an ARO Cluster using Azure Container Storage
- Configure ARO with Azure Policy
- Create infrastructure nodes on an ARO Cluster
- Configure a load balancer service to use a static public IP
- Upgrade a disconnected ARO cluster
- Using Azure Container Registry in Private ARO clusters
- Configure an ARO cluster with Azure Files using a private endpoint
- Use Azure Blob storage Container Storage Interface (CSI) driver on an ARO cluster
- Configure ARO with Cross-Tenant Encryption Keys
- Deploying Private ARO clusters with Custom Domains
- Deploying ARO using azurerm Terraform Provider
- Deploying ACM and ODF for ARO Disaster Recovery
- Deploy Ansible Automation Platform (AAP) on ARO
- Deploy Maximo Application Suite (MAS) on ARO
- Remove the default azure-files storage class
- Scalability and Cost Management for ARO
- Backup and Restore for ARO using OpenShift API for Data Protection
- Configure OpenShift Lightspeed backed by Azure AI Foundry for the LLM
OpenShift Dedicated
- Deploy OSD in GCP using Pre-Existent VPC and Subnets
- Using Filestore with OpenShift Dedicated in GCP
- Limit Egress with Google Cloud NGFW Standard
- Limit Egress with Google Cloud Secure Web Proxy
- Install Maximo Application Suite on Red Hat OpenShift Dedicated on GCP with automation
- Add an Ingress Controller to OpenShift Dedicated on GCP with a custom domain
Layered Products
OpenShift Virtualization
- Deploy OpenShift Virtualization on Azure Red Hat OpenShift (ARO)
- Migrating Azure VM Instances to OpenShift Virtualization
- Deploy OpenShift Virtualization on Red Hat OpenShift Service on AWS (ROSA)
- Deploy OpenShift Virtualization on Red Hat OpenShift Service on AWS (ROSA) with Netapp FSx CSI Driver
- Deploying and Managing Virtual Machines on ROSA with OpenShift GitOps
- Migrating EC2 Instances to OpenShift Virtualization
Red Hat OpenShift AI
- Running and Deploying LLMs using Red Hat OpenShift AI on ROSA cluster and Storing the Model in Amazon S3 Bucket
- Creating Images using Stable Diffusion on Red Hat OpenShift AI on ROSA cluster with GPU enabled
- Creating RAG Chatbot using TinyLlama and LangChain APIs on Red Hat OpenShift AI on ARO cluster
- Building LLM Cost and Performance Dashboard with Red Hat OpenShift AI on ROSA and Amazon Bedrock
- Creating Agentic AI to deploy ARO cluster using Terraform with Red Hat OpenShift AI on ROSA and Amazon Bedrock
Red Hat Advanced Cluster Manager for Kubernetes
- Deploy ACM Observability to a ROSA cluster
- Deploy ACM Submariner for connecting overlay networks of ROSA clusters
- Deploy ACM Submariner for connect overlay networks ARO - ROSA clusters
Red Hat Advanced Cluster Security for Kubernetes
Identity Providers (IdP)
Configuring Specific Identity Providers
- Configure GitLab as an identity provider for ROSA/OSD
- Configure GitLab as an identity provider for ARO
- Configure Microsoft Entra ID as an identity provider for ARO
- Configure Microsoft Entra ID as an identitiy provider for ARO with group claims
- Configure Microsoft Entra ID as an identitiy provider for ROSA with group claims
- Configure Microsoft Entra ID as an identity provider for ROSA/OSD
- Configure Microsoft Entra ID as an identity provider for ARO via the CLI
- Configure Red Hat SSO with Microsoft Entra ID as a Federated Identity Provider for ARO
- Considerations when using AAD as IDP
- Configuring Microsoft Entra ID to emit group names instead of group IDs
Configuring Group Synchronization
- Using Group Sync Operator with Microsoft Entra ID and ROSA/OSD
- Using Group Sync Operator with Okta and ROSA/OSD
Miscellaneous
General
- Demonstrating GitOps - ArgoCD
- Migrate Kubernetes Applications with Konveyor Crane
- Red Hat Cost Management for Cloud Services
- Deploy OpenShift Advanced Data Protection on a ROSA STS cluster
- Azure DevOps with Managed OpenShift
- Configuring OpenShift Dev Spaces to serve Custom Domains
- Setting up Cross-Cluster PostgreSQL Replication with Skupper on ROSA and ARO
- Configuring Cross-Tenant Azure DevOps Access from ArgoCD on ARO
- Secrets Store CSI
Observability
- Deploy Grafana on OpenShift 4
- Configuring Alerts for User Workloads
- Federating ROSA metrics to S3
- Federating ROSA metrics to AWS Prometheus
- Configure ROSA STS Cluster Logging to CloudWatch
- Federating ARO metrics to Azure Files
- Sending ARO cluster logs to Azure Log Analytics
- Shipping logs and metrics to Azure Blob storage
- Use AWS CloudWatch Agent to push prometheus metrics to AWS CloudWatch
- Installing and configuring OpenShift Logging 6 on ROSA HCP
- Installing and configuring OpenShift Logging 5 on ROSA Classic
- Configuring Cluster Observability Operator (COO) in ARO and Enabling remote writing of metrics to Azure Monitor Workspace
- Configuring oTEL to collect OpenShift Logs instead of the Cluster Log Forwarder
